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Mm the evening of Jmuary 31, 1984, one of the canputers at Drake University was penetrated 
by hackers. ‘These individuals wre not menbers of the Drake canmmity and the intrusion was 
accamplished despite the existence of security measures and canputer systems protections that were 
in pl@e. 


The incident at Drake is probably not important in its miqueness nor are the circumstances 
which provoked the intrusion of importance here. What is important is that the event did occur; 
that it is considered as a serious intrusion and violation of Wniversity property, access, and 
trust; and that it happened despite the existence of reasonable and extensive protection measures 
that were in place to discourage such attempts. The latter point is particularly important. Just 
as our hames cannot be made totally secure and burglar proof by affordable security measures, in 
this day of electronic innovation and enterprise, canputer security measures cannot be relied upon 
to stop the determined intrwer. University canputer systems are particularly vulnerable to such 
intrusions. Ready access for legitimate users must be maintained. If learning and research are 
to take place, miversity canputer systens must be reasonably available, accessible and user 
friendly to menbers of the wmiversity canmmity. If trust in the system is to be maintained, 
those sane users must be able to be confident that the materials that they put onto the system are 
not subject to access and manipulation by unauthorized individuals. 


As stated above, the persons involved in the canputer break-in at Drake University were not 
menbers of the lniversity canmmity. ‘They penetrated and used the camputer system in an 
unauthorized manner. They exploited an essentially user friendly system and in so doing not only 
used canputer time, a resource with some valve, but of greater consequence, the result of the 
penetration required the expenditure of canputer resources and canputer center staff time, made 
necessary the implanentation of additional and more expensive security and monitoring procedures, 
and created within the miversity comunity a aura of concern and dowt regarding the security of 
the content of personal materials stored on the canputer. Because the "hackers" are not members 
of the wniversity comunity, they are not subject to internal wmiversity sanctions. The lak of 
adequate and specific laws governing canputer crime means that despite the loss suffered by the 
University and its students and faculty, and despite the addition of increased security measures, 
the hopes of maintaining a secure camputer system are slim. 


If a hacker can penetrate and roan a canputer system at will, without fear of puisiment, and 
without his or her acts being defined as criminal, this emergent and pervasive problem will 
continue to hamt miversity canputer centers and canputer users. This, simply put, means that 
the miversity becames less effective in its attempt to fulfill the educational needs and demands 
of society. This is a serious proble. 


To date, there has been a tendency, on the part of the public, to view suh violations as 
intellectual prmksterisn. This is simply not the case. The wiquity of camputers in virtually 
every dimension of our everyday lives underlines this point and dictates our concern. Concern, 
however, is not enough. University leaders must continue to assume amd pursue the responsibility 
of providing secure canputer access to legitimate users. We must be prepared to take strong 
measures in response to inappropriate behavior by those who are members of our user communities. 
That, however, is not enough. Societal definitions, deterrents, and punishments are needed to 
control external violators. More states must move to provide laws that define canputer dmæe and 
theft as criminal acts and appropriate sanctions must be provided. In addition, given the 
interconnectedness of the enterprise of higher education, federal legislation to these sane ends 
is essential. We have a problem. The problem is canputer theft and damage. We feel that the 
problen is a serious one, one that we cannot address by ourselves. We need your help. We need 
legislation that will aid us in ow attempts to secure and maintain a quality edwation for this 
generation of students am for generations of students to cane. 


